CVE-2018-8148: High severity Microsoft Excel vulnerability

Published May 9, 2018

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8147, CVE-2018-8162.

Affected Software

8 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Office Compatibility Pack=sp3

Microsoft Office for Mac=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8148

Event History

May 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityAffected Software

Jul 24, 58461

Event

08:22 AM

Frequently Asked Questions

What is CVE-2018-8148?

CVE-2018-8148 is a remote code execution vulnerability in Microsoft Excel software.

How does CVE-2018-8148 affect Microsoft Office and Microsoft Excel?

CVE-2018-8148 affects Microsoft Office and Microsoft Excel.

What is the severity of CVE-2018-8148?

CVE-2018-8148 has a severity rating of 7.8, which is considered critical.

Which versions of Microsoft Excel and Microsoft Office are affected by CVE-2018-8148?

Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2016, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Compatibility Pack SP3, and Office For Mac 2016 are affected by CVE-2018-8148.

How can I fix CVE-2018-8148?

Apply the necessary security updates provided by Microsoft to fix CVE-2018-8148.